MySQLDumper 1.24.4 - Directory Traversal Detection

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

CVE-2012-4252: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the authentication of administrators for requests that 1 remove file access restriction via a deletehtaccess action, 2 drop a database via a kill value in a db action, 3 uninstall the...

PT-2012-5282

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to specific API endpoints, such as "learn/cubemail/restore.php" or "learn/cubemail/dump.php". Recommendations For...

PT-2012-5283

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to "learn/cubemail/refresh dblist.php", which reveals the installation path in an error message. Recommendations For...

CVE-2012-4254: Exposure of Sensitive Information to an Unauthorized Actor

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information Notices via a direct request to 1 learn/cubemail/restore.php or 2 learn/cubemail/dump.php...

CVE-2012-4255: Exposure of Sensitive Information to an Unauthorized Actor

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refreshdblist.php, which reveals the installation path in an error message...

PT-2012-5280

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to hijack the authentication of administrators for various requests, including removing file access restrictions, dropping a database, uninstalling the application,...